Search & browse the archive

EFF — Deeplinks · Sep 24, 2026 · International

DraftKings Is Using AI to Supercharge the Harms of Online Behavioral Advertising

Online sports betting company DraftKings is using AI to target customers who are most likely to place losing bets and respond to gambling promotions. This kind of targeting is a form of online behavioral advertising, which is when companies personalize the ads they show you based on the data they’ve collected about you. The more data a company has, the more personalized the ad can be. While DraftKings is using AI to supercharge the harmful effects of online behavioral advertising, EFF has long argued that all behavioral advertising should be banned. According to the New York Times, DraftKings…

Who should care: General readers · AI governance · Policy

BleepingComputer · Sep 24, 2026 · International

New Carbonato malware uses AI agents to hijack exposed Docker hosts

A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. [...]

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

WIRED — AI · Sep 24, 2026 · International

I Think I Found an AI Agent Worth the Risk

Instinct saved me $550, booked my restaurant reservations, and warned me about a phishing scam. It also wasted $64 and might be a security nightmare.

Who should care: General readers · AI governance · Policy

More AI regulation ordered by Oregon governor

Oregon's governor has ordered increased regulation of artificial intelligence, according to a report from OregonLive. Details of the specific rules or scope of the directive were not provided in the available information.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Banks warn AI shopping agents could increase risk of scams, fraud and data privacy breaches

Banks are raising concerns that AI-powered shopping agents, which act autonomously on behalf of consumers, create new openings for scams, fraud, and data privacy breaches. The warnings suggest the financial sector sees these tools as an emerging risk rather than a straightforward convenience.

Who should care: General readers · AI governance · Policy · Privacy officers

The Record · Sep 24, 2026 · International

Rydox cybercriminal marketplace operator pleads guilty following co-conspirator brothers’s deportation

Ardit Kutleshi, 28, was extradited from his home country of Kosovo last year after prosecutors accused him and his older brother of running Rydox — an illicit platform used by cybercriminals to sell stolen personal information, illegal access to devices and other tools for carrying out fraud.

Who should care: General readers · Privacy officers · Policy

CyberScoop · Sep 24, 2026 · US Federal

New bill would create federal investigative body for AI-driven hacks

A new Democratic bill in Congress would establish a federal Cybersecurity and AI Board of Investigations to provide independent government oversight of cyberattacks carried out by AI agents, following recent hacks by models run at companies like Anthropic, OpenAI, Meta and others. The bill, introduced by Sen. Ed Markey, D-Mass., would attempt to establish a […] The post New bill would create federal investigative body for AI-driven hacks appeared first on CyberScoop.

Who should care: General readers · AI governance · Policy

BBC — Tech · Sep 24, 2026 · International

Why Australia chose the world's biggest political stage to reveal OpenAI hack

Australia disclosed a breach involving OpenAI at the United Nations, choosing one of the world's most prominent international forums to make the announcement. The country has been active in regulating digital platforms, including social media restrictions and proposed controls on algorithms and smart glasses.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy

BleepingComputer · Sep 24, 2026 · International

Exposed GitLab project email addresses let attackers push code

Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

DataBreaches.net · Sep 24, 2026 · International

Kosovar National Pleads Guilty to Operating Cybercrime Marketplace Offering Tools and Products to Cybercriminals

From the DOJ: Ardit Kutleshi, 28, a Kosovar national, pleaded guilty to charges related to his creation and operation of Rydox, an illicit website and marketplace for cybercriminals to buy, sell and trade stolen personal information, and to access devices and other tools for carrying out cybercrime and fraud. “The guilty plea of Ardit Kutleshi... Source

Who should care: General readers · Privacy officers · Policy

How a USU Engineering Student is Contributing to AI Policy in DC

A Utah State University engineering student is involved in shaping AI policy work in Washington, D.C., according to a report from the university.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Military Times · Sep 24, 2026 · US Federal

Military personnel data exposed in breach, agency warns

An agency has issued a breach notification warning that unauthorized individuals accessed files containing personal information belonging to U.S. military personnel. The scope of the exposed data and the number of people affected have not been specified in available reporting.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

The Guardian — Tech · Sep 24, 2026 · International

Launch of UK’s ‘largest AI supercomputer’ delayed by power supply problems

Datacentre hailed by government was supposed to start operating next year but may be held back into mid-2030s A huge datacentre project hailed by the UK government will miss its launch date next year and could be delayed into the mid-2030s. The site in Loughton, Essex, was described as the country’s largest AI supercomputer when it was announced in 2025, but power supply problems mean it now faces a lengthy wait before coming online. Continue reading...

Who should care: General readers · AI governance · Policy

Data Protection Commission · Sep 24, 2026 · EU / Ireland

DPC AI Insights Report

Ireland's Data Protection Commission has published an AI Insights Report, indicating the regulator is actively examining artificial intelligence through a data protection lens.

Who should care: General readers · AI governance · Policy · Privacy officers

Costa Rican Foreign Minister dismissed after attending a Trump security meeting

Costa Rican Foreign Minister dismissed after attending a Trump security meeting reuters.com

Politico — Tech · Sep 24, 2026 · International

Peter Thiel slams pope’s AI encyclical as gift to Chinese Communist Party

The tech billionaire argued that Pope Leo XIV’s call to regulate AI could slow the West while China surges ahead with the technology.

Who should care: Lawyers · Compliance · General readers · AI governance · Policy

Video: Ricketts Introduces Agricultural Data Privacy Act

Video: Ricketts Introduces Agricultural Data Privacy Act Senator Pete Ricketts (.gov)

Who should care: General readers · Privacy officers · Policy

New York Times — Tech · Sep 24, 2026 · International

Complaints About Meta’s ‘Pervert Glasses’ Won’t Slow Tech’s Wearable Gadgets Drive

Meta’s smart glasses are the latest in a line of products to raise eyebrows over privacy. That’s not stopping other companies from creating similar devices.

Who should care: General readers · Privacy officers · Policy

The EU AI Act: Key Dates for Compliance (UPDATED)

The EU AI Act is rolling out in phases, with different compliance deadlines applying to different categories of AI systems and obligations. An updated guide outlines the key dates that organizations operating in or selling into the EU need to track.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

DataBreaches.net · Sep 24, 2026 · International

Wyoming courts investigate extent of personal data exposed in cybersecurity breach

The Wyoming Judicial Branch is investigating a cybersecurity breach at West Publishing Corporation, a third-party case management vendor formerly used by the state's courts. Officials say the incident may have exposed up to a decade of court system data, though the full scope is still being determined.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

DataBreaches.net · Sep 24, 2026 · International

Error on North Carolina jury duty website exposed people’s social security numbers, medical records, more

Kudos to WBTV for following up on an astute observer’s vulnerability report. David Hodges reports: North Carolina residents summoned for jury duty received notice through a letter in the mail but to request an exemption from jury duty in North Carolina, a person can go online and fill out a jury excuse form. Zach Duda... Source

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

IAPP · Sep 24, 2026 · International

Global AI cybersecurity concerns face new twist following Australia Medicare portal breach

Australia's Medicare portal has suffered a breach, adding a concrete public-sector example to ongoing global debates about AI and cybersecurity risk. The incident is drawing attention from privacy and governance communities tracking vulnerabilities in government digital infrastructure.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

The Guardian — Tech · Sep 24, 2026 · International

Xi says China and US must ensure AI ‘is always under human control’ as Trump touts ‘great friendship’ before White House talks – live

Xi arrived at the White House on Thursday morning ahead of major talks, which are expected to cover trade, AI, Taiwan and more In the first row in front of the leaders sit US vice-president JD Vance and his wife Usha Vance, Trump’s daughter Ivanka Trump and her daughter Arabella, US secretary of state Marco Rubio, treasury secretary Scott Bessent, defence secretary Pete Hegseth and commerce secretary Howard Lutnick. Donald Trump is speaking now. He notes that Xi is the first Chinese leader to make a second formal visit to the White House, and says the two have “forged a truly great friendship…

Who should care: General readers · AI governance · Policy

IAPP · Sep 24, 2026 · International

Notes from the IAPP Europe: Children online, future of AI and EU digital laws clarifications

Notes from the IAPP Europe: Children online, future of AI and EU digital laws clarifications IAPP

Who should care: General readers · AI governance · Policy